Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: sKDTda0Nmzeis/Xa7aolbBWmhE7xveNnoWHjVFiCQr8=
Subject key identifier: 95:A2:D8:7D:C4:FA:B6:C2:50:8D:B2:3C:BE:B6:10:64:68:5D:29:9B
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 0197B5FBE2F1281EEDEDF18C20CA2A42D9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 10:01:13 +0000
Manifest this update: Sat 28 Jun 2025 10:01:13 +0000
Manifest next update: Sun 29 Jun 2025 10:01:13 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: Pk+JPaLOXYBiwiC5Ofg7MMe+INlhUbq2bTPuipbIqhg=)
2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:e2:f1:28:1e:ed:ed:f1:8c:20:ca:2a:42:d9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Jun 28 10:01:13 2025 GMT
Not After : Jun 29 10:01:13 2025 GMT
Subject: CN=95a2d87dc4fab6c2508db23cbeb61064685d299b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:0d:1e:ca:63:ca:8a:87:30:45:06:2d:32:
5d:72:5f:56:9e:88:62:52:97:a9:a8:73:7a:be:57:
4c:dc:22:5a:ac:24:d2:9d:97:90:79:89:28:d5:1b:
06:f5:f6:c5:cf:7f:48:40:c1:01:3f:a9:eb:07:eb:
92:cc:08:e0:14:93:09:59:7e:a6:d2:98:e5:cc:eb:
04:bf:2f:78:27:fc:9e:ab:04:f7:31:8d:ee:70:76:
5b:5c:8f:4a:c6:aa:1c:ba:8e:32:ca:8d:d6:df:13:
54:7c:7f:54:05:1b:ff:6d:b9:49:f0:6c:c8:d7:52:
91:30:75:64:95:ce:e3:6d:10:ca:72:29:b1:fc:94:
23:3b:bf:2b:50:5f:a3:6b:e6:1f:e7:38:34:51:01:
7d:e4:39:42:41:88:e9:ab:cb:6f:29:5d:78:42:f7:
36:c8:77:49:05:07:dd:f1:99:18:38:99:aa:55:9e:
74:4c:78:6d:ca:12:f7:fc:9e:6c:1f:b1:7e:9d:b5:
18:da:29:26:08:1c:64:b4:47:42:37:ab:4a:7a:f1:
16:a9:36:37:52:14:fa:a6:41:09:2e:52:3d:4d:b5:
8f:ee:61:2a:6d:63:40:6e:24:aa:36:ba:32:93:f1:
8a:a6:01:87:e3:78:b6:61:5a:5e:b4:da:7d:7f:b1:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A2:D8:7D:C4:FA:B6:C2:50:8D:B2:3C:BE:B6:10:64:68:5D:29:9B
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2b:10:d7:12:59:0d:47:c1:d6:ab:a9:c5:ef:7c:64:4f:d2:
8e:24:39:a3:d0:e9:41:9b:5f:fb:c0:0d:76:31:50:12:9c:7c:
44:3b:8f:aa:c8:34:be:08:1c:bf:d1:c0:06:db:1b:df:b5:9c:
e5:3e:6a:47:8b:53:2d:2e:96:32:a6:0b:54:31:fb:b6:a3:1e:
43:2a:10:4d:3c:a0:f2:79:af:02:ea:8a:4d:c3:46:10:96:e1:
cf:a4:4c:01:9c:e6:e0:a2:6f:6f:d2:c8:a8:46:04:9a:9c:d5:
47:f2:e9:bb:a2:49:60:31:b2:e5:a2:44:fe:24:d8:53:16:f8:
ce:da:de:b2:62:46:ec:94:5c:fd:ce:79:8f:6b:22:69:11:5e:
f7:62:be:eb:0e:9f:cc:df:3a:94:9b:c6:35:7e:b2:de:a1:6c:
57:ef:5c:88:6f:08:6f:7a:b0:99:36:76:f9:ff:d7:03:ee:c5:
3f:5e:72:45:e8:25:02:24:db:1a:0b:3f:e4:e2:24:09:2b:dd:
0a:cf:1f:25:1a:15:ff:80:43:a8:03:9e:ff:6d:56:f4:da:e8:
70:dc:cf:34:87:0c:7e:f7:af:e9:46:32:25:ee:0b:8a:d5:16:
44:63:5e:a5:08:4e:85:fe:eb:75:aa:84:4a:d1:10:8c:96:ae:
35:b2:71:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1++LxKB7t7fGMIMoqQtn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNmU2ZjM5MjI3MTk1MWIzNTM0N2ZhY2Q1MTNmOTMyZmU2
N2EwYzEwHhcNMjUwNjI4MTAwMTEzWhcNMjUwNjI5MTAwMTEzWjAzMTEwLwYDVQQD
Eyg5NWEyZDg3ZGM0ZmFiNmMyNTA4ZGIyM2NiZWI2MTA2NDY4NWQyOTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKgNHspjyoqHMEUGLTJdcl9Wnohi
UpepqHN6vldM3CJarCTSnZeQeYko1RsG9fbFz39IQMEBP6nrB+uSzAjgFJMJWX6m
0pjlzOsEvy94J/yeqwT3MY3ucHZbXI9Kxqocuo4yyo3W3xNUfH9UBRv/bblJ8GzI
11KRMHVklc7jbRDKcimx/JQjO78rUF+ja+Yf5zg0UQF95DlCQYjpq8tvKV14Qvc2
yHdJBQfd8ZkYOJmqVZ50THhtyhL3/J5sH7F+nbUY2ikmCBxktEdCN6tKevEWqTY3
UhT6pkEJLlI9TbWP7mEqbWNAbiSqNroyk/GKpgGH43i2YVpetNp9f7FmKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWi2H3E+rbCUI2yPL62EGRoXSmbMB8GA1UdIwQY
MBaAFNpubzkicZUbNTR/rNUT+TL+Z6DBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAt
Mjc2NDdiY2VmNGIwLzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAtMjc2NDdiY2VmNGIw
LzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECsQ1xJZ
DUfB1qupxe98ZE/SjiQ5o9DpQZtf+8ANdjFQEpx8RDuPqsg0vggcv9HABtsb37Wc
5T5qR4tTLS6WMqYLVDH7tqMeQyoQTTyg8nmvAuqKTcNGEJbhz6RMAZzm4KJvb9LI
qEYEmpzVR/Lpu6JJYDGy5aJE/iTYUxb4ztresmJG7JRc/c55j2siaRFe92K+6w6f
zN86lJvGNX6y3qFsV+9ciG8Ib3qwmTZ2+f/XA+7FP15yReglAiTbGgs/5OIkCSvd
Cs8fJRoV/4BDqAOe/21W9NrocNzPNIcMfvev6UYyJe4LitUWRGNepQhOhf7rdaqE
StEQjJauNbJxPg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:14 2025 by rpki-client